This is a well known false positive. There is not much we can do about that as someone did deploy the proxy to a botnet. Thus it is flagged now by the antivirus providers. This is a well known issue with all kinds of mining software.